SG-1100: extend the OPT1 network out the LAN port as a tagged VLAN
-
My LAN port is internally switched as VLAN 4091, and the OPT as 4092. I have pfSense configured with IP on each of those networks, where LAN is my "secure" network and OPT1 is my "unsecure" (IoT) network.
The goal is to plug a wireless AP into the LAN network, where the AP tags traffic to vlan 4092. Then pfSense will take that tagged traffic off the LAN port, untag it, an deliver it to the OPT/IoT network.
The internals of the SG-1100's switch and vlans is hard to get my brain wrapped around